13.92.139.102 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	(pop3d) Failed POP3 login from 13.92.139.102 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 1 08:24:14 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=13.92.139.102, lip=5.63.12.44, session=	2020-04-01 14:04:26

类型

评论内容

时间

attackspambots

(pop3d) Failed POP3 login from 13.92.139.102 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr  1 08:24:14 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=13.92.139.102, lip=5.63.12.44, session=

2020-04-01 14:04:26

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.92.139.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39913
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.92.139.102.			IN	A

;; AUTHORITY SECTION:
.			317	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033102 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 14:04:21 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 102.139.92.13.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 102.139.92.13.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.30.76	attackspam	Feb 12 23:04:30 areeb-Workstation sshd[7401]: Failed password for root from 222.186.30.76 port 50419 ssh2 Feb 12 23:04:35 areeb-Workstation sshd[7401]: Failed password for root from 222.186.30.76 port 50419 ssh2 ...	2020-02-13 01:41:49
113.128.104.238	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 563f3129cef198e7 \| WAF_Rule_ID: a75424b44a1e4f27881d03344a122815 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2020-02-13 01:46:19
78.41.175.161	attackspambots	Feb 12 19:02:04 MK-Soft-Root2 sshd[1167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.41.175.161 Feb 12 19:02:06 MK-Soft-Root2 sshd[1167]: Failed password for invalid user dun from 78.41.175.161 port 45956 ssh2 ...	2020-02-13 02:03:11
202.152.135.2	attack	SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt	2020-02-13 01:35:12
206.189.171.204	attackbots	pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.171.204 Failed password for invalid user barbie from 206.189.171.204 port 52496 ssh2 Invalid user abia1 from 206.189.171.204 port 40112 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.171.204 Failed password for invalid user abia1 from 206.189.171.204 port 40112 ssh2	2020-02-13 02:13:19
182.61.177.109	attackbotsspam	Feb 12 14:43:23 ks10 sshd[16525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.177.109 Feb 12 14:43:25 ks10 sshd[16525]: Failed password for invalid user stagiaire from 182.61.177.109 port 50690 ssh2 ...	2020-02-13 01:39:01
180.76.244.97	attackbotsspam	Brute-force attempt banned	2020-02-13 01:42:22
45.234.116.2	attackbots	Received: from maerskline.com (45.234.116.2) Wed, 12 Feb 2020 14:23:07 From: Maersk Notification To: <> Subject: Maersk : Arrival Notice ready for Bill of Lading 969812227 Date: Wed, 12 Feb 2020 11:21:29 -0300 Message-ID: <20200212112129@maerskline.com> Return-Path: notification@maerskline.com X-MS-Exchange-Organization-PRD: maerskline.com Received-SPF: SoftFail (domain of transitioning notification@maerskline.com discourages use of 45.234.116.2 as permitted sender) OrigIP:45.234.116.2	2020-02-13 01:47:19
153.126.211.146	attackbots	Lines containing failures of 153.126.211.146 Feb 12 14:14:13 kmh-vmh-002-fsn07 sshd[1065]: Invalid user avinash from 153.126.211.146 port 37968 Feb 12 14:14:13 kmh-vmh-002-fsn07 sshd[1065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.126.211.146 Feb 12 14:14:15 kmh-vmh-002-fsn07 sshd[1065]: Failed password for invalid user avinash from 153.126.211.146 port 37968 ssh2 Feb 12 14:14:16 kmh-vmh-002-fsn07 sshd[1065]: Received disconnect from 153.126.211.146 port 37968:11: Bye Bye [preauth] Feb 12 14:14:16 kmh-vmh-002-fsn07 sshd[1065]: Disconnected from invalid user avinash 153.126.211.146 port 37968 [preauth] Feb 12 14:30:42 kmh-vmh-002-fsn07 sshd[27364]: Invalid user admsrv from 153.126.211.146 port 44886 Feb 12 14:30:42 kmh-vmh-002-fsn07 sshd[27364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.126.211.146 Feb 12 14:30:43 kmh-vmh-002-fsn07 sshd[27364]: Failed password for invali........ ------------------------------	2020-02-13 01:56:02
79.132.176.142	attackspambots	Feb 12 07:11:58 ingram sshd[8906]: Invalid user pi from 79.132.176.142 Feb 12 07:11:58 ingram sshd[8906]: Failed none for invalid user pi from 79.132.176.142 port 49298 ssh2 Feb 12 07:11:59 ingram sshd[8909]: Invalid user pi from 79.132.176.142 Feb 12 07:11:59 ingram sshd[8909]: Failed none for invalid user pi from 79.132.176.142 port 49304 ssh2 Feb 12 07:11:59 ingram sshd[8906]: Failed password for invalid user pi from 79.132.176.142 port 49298 ssh2 Feb 12 07:11:59 ingram sshd[8909]: Failed password for invalid user pi from 79.132.176.142 port 49304 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=79.132.176.142	2020-02-13 01:40:04
157.230.231.39	attackbots	Feb 12 17:24:23 web8 sshd\[10793\]: Invalid user webadmin from 157.230.231.39 Feb 12 17:24:23 web8 sshd\[10793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.231.39 Feb 12 17:24:25 web8 sshd\[10793\]: Failed password for invalid user webadmin from 157.230.231.39 port 54352 ssh2 Feb 12 17:26:43 web8 sshd\[11867\]: Invalid user test from 157.230.231.39 Feb 12 17:26:43 web8 sshd\[11867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.231.39	2020-02-13 01:36:36
113.172.43.125	attack	Lines containing failures of 113.172.43.125 Feb 12 14:35:10 smtp-out sshd[13344]: Invalid user admin from 113.172.43.125 port 57881 Feb 12 14:35:10 smtp-out sshd[13344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.43.125 Feb 12 14:35:13 smtp-out sshd[13344]: Failed password for invalid user admin from 113.172.43.125 port 57881 ssh2 Feb 12 14:35:16 smtp-out sshd[13344]: Connection closed by invalid user admin 113.172.43.125 port 57881 [preauth] Feb 12 14:35:20 smtp-out sshd[13354]: Invalid user admin from 113.172.43.125 port 57918 Feb 12 14:35:20 smtp-out sshd[13354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.43.125 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.172.43.125	2020-02-13 02:08:15
138.197.147.128	attack	Feb 12 15:37:07 * sshd[26847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.147.128 Feb 12 15:37:09 * sshd[26847]: Failed password for invalid user sharyl from 138.197.147.128 port 48610 ssh2	2020-02-13 01:31:31
41.89.105.17	attackspambots	Automatic report - Port Scan	2020-02-13 01:40:28
91.217.197.176	attackspambots	[Tue Feb 11 13:04:48 2020] [error] [client 91.217.197.176] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /	2020-02-13 01:36:05

最近上报的IP列表

162.217.167.70	210.246.138.85	163.238.20.114	51.84.55.186
150.194.38.148	62.97.44.33	198.65.12.118	43.10.222.205
35.36.58.163	164.156.127.81	49.56.93.77	118.89.60.105
223.15.146.235	172.104.235.73	121.148.0.153	125.234.134.225
105.83.144.5	180.241.45.167	61.65.249.152	77.81.191.142